Personal data protection

1. The personal data controller VMJ PRO, s.r.o., ID No. 19621612, with its registered office at Bělehradská 237/11, Prague 140 00, Czech Republic, registered in the Commercial Register of the Municipal Court in Prague, C 389325, (hereinafter referred to as the "controller"), declares that all personal data processed by the controller are strictly confidential. The controller handles them in accordance with national legislation and European Union regulations applicable to the protection of personal data.
2. The controller collects, stores, and uses your personal data in accordance with Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the "Personal Data Processing Act"), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"). The specific purposes for which the controller processes personal data are further defined
3. The controller also collects this personal data through its website at www.aurumpro.cz (hereinafter referred to as the "website").
4. The controller issues this policy so that you are sufficiently informed about what personal data the controller processes, for what purpose, for how long, who will have access to your personal data, and what rights you have. This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest, or consent given.
5. The controller collects the following data: Name and contact details. First name and surname, email address, demographic data.
6. The controller has appointed the following data protection officer in accordance with Article 37 et seq. of the Regulation: Ing. Jaroslav Křůpala, email: info@aurumpro.cz

DATA PROCESSED

The administrator is authorized to process the following personal data according to the purpose, categories of personal data, categories of data subjects, categories of recipients, and retention periods as follows.

N.	Purpose of processing	Categories of personal data	Data subject category	Categories of recipients	Retention period
1	Registration and management of user accounts	Address and identification details	Users of the website www.aurumpro.cz	Personal data controller	5 years
2	Provision and improvement of services	Address and identification details	Users of the website www.aurumpro.cz	Personal data controller	5 years
3	Communication	Address and identification details	Users of the website www.aurumpro.cz	Personal data controller	5 years
4	Marketing offers	Address and identification details	Users of the website www.aurumpro.cz	Personal data controller	5 years

The individual purposes of processing are as follows:

1. performance of a contractual relationship means: the relationship between you and the administrator arising on the basis of an order, registration, a concluded contract, an application, participation in a competition, etc.;
2. sending commercial communications and offering products and services means: sending commercial offers by electronic mail (e-mail), short text messages or telephone calls;
3. accounting and tax purposes means: accounting records within the meaning of accounting and tax legislation;
4. personnel and payroll administration means: concluding employment contracts, processing wages, social security and health insurance contributions in accordance with Act No. 262/2006 Coll., the Labor Code, No. 582/1991 Coll. on the organization and implementation of social security No. 48/1997 Coll., on public health insurance and on amendments and supplements to certain related laws;
5. statistical purposes means: anonymous collection of website traffic data, monitoring of the number of page views, time spent on the website, type of device used to access the website. We collect this data in order to improve the quality of our services and offer our clients relevant content;
6. displaying advertisements means: displaying advertisements on websites based on statistically determined customer preferences;
7. legitimate interest means: effective defense in the event of a dispute; in such a case, the period for processing personal data is 4 years from the expiry of the warranty period for the goods and is extended by the duration of the dispute. We want to continuously improve our services and, where appropriate, provide new and better services; we want to prevent the obstruction of such activities; therefore, activities that contribute to the fulfillment of this goal are our legitimate interest. Legitimate interests also include processing for the purposes of preventing fraud (e.g., assessing the risk of concluding a contract), direct marketing (e.g., offering relevant services to existing customers), transferring personal data within a group of companies for internal administrative purposes, reporting criminal offenses and transferring personal data to the competent authority, and ensuring network and information security. This list is only illustrative;
8. fulfilling other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, and the like.
9. We process your personal data for the time necessary to ensure all rights and obligations arising from mutual legal transactions, at least for the duration of order processing, transaction execution, service provision, etc., and further for the period during which the controller is obliged to retain personal data in accordance with generally binding legal regulations or for the period for which you have given your consent to the controller. Otherwise, the processing period is determined by the purpose for which the personal data is processed or is specified by law.
10. Personal data is processed by the controller both manually and automatically. The controller is entitled to process certain information automatically, for example to create statistical information about the traffic on its website.

TEXT OF CONSENT

By checking the box before submitting your order

In accordance with Article 6(1)(a) a) of Regulation (EU) 2016/678 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"), which entered into force on 25 May 2018

I agree to the collection, storage, and processing of my personal data provided to the administrator.

WHAT DATA WILL BE PROCESSED

1. If we have obtained your consent to process your personal data, it was for one of the following purposes:
   
   1. Registration and management of user accounts
   2. Sending commercial communications and product offers
   3. Communication
2. We process the following data:
   
   • First and last name
   • Email address
   • Company ID
   • Bank account number
   • IP address

DATA SUBJECT RIGHTS

1. As a data subject, you have the rights set out below, which arise from legal regulations and which you can exercise at any time. These are:
   
   1. the right to access personal data, according to which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is specified in Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;
   2. the right to rectify or erase personal data, or restrict processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If your personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not wish to request the erasure of personal data, but only to temporarily restrict its processing, you may request restriction of processing;
   3. the right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;
   4. the right to contact the Office for Personal Data Protection in case of doubts about compliance with obligations related to the processing of personal data;
   5. the right to data portability, i.e. the right to obtain personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format; for more details, see Article 20 of the GDPR;
   6. the right to object to the processing of personal data that is processed for the purposes of performing a task carried out in the public interest or in the exercise of official authority or for the purposes of protecting the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there are legitimate grounds for the processing which override your interests, rights, and freedoms;
   7. the right to withdraw your consent to the processing of personal data at any time, if you have given the controller consent to process personal data.

COOKIES

1. Cookies are short text files that a website sends to your browser. They enable the website to record information about your visit, such as your preferred language, so that your next visit to the site is easier and more enjoyable. Cookies are important because without them, browsing the Internet would be much more complicated. Cookies enable better use of our website and tailor its content to your needs; they are used by almost every website in the world. Cookies are useful because they increase the user-friendliness of websites that are visited repeatedly.
2. The administrator may use the following types of cookies on its website:
   
   1. Session (i.e., temporary) cookies allow us to link your individual activities while you are browsing this website. These files are activated when you open your browser window and deactivated when you close your browser window. Session cookies are temporary and all these files are deleted when you close your browser.
   2. Persistent cookies help us identify your computer when you visit our website again. Another advantage of persistent cookies is that they allow us to tailor our website to your needs.
3. In accordance with Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, as amended, we hereby inform you that our website uses cookies for its operation, which means that we process your cookies, including persistent cookies.
4. Internet browsers usually include cookie management. You can probably delete individual cookies manually, block them, or completely disable their use in your browser settings. For more information, please refer to your internet browser's help section. If you do not allow the use of cookies, some features and pages may not work as intended.
5. We use cookies to personalize content and ads, provide social media features, and analyze our traffic. We share information about how you use our website with our social media, advertising, and analytics partners. By using our website, you consent to the linking of the following services:
   
   1. Google
   2. Facebook
   3. Instagram
6. In order to display targeted advertising within advertising and social networks on other websites, we pass on information about your behavior on our website to these advertising and social networks; however, we do not pass on your identification data.

TRANSFER TO THIRD COUNTRIES

1. Your personal data will not be transferred to third countries.

INFORMATION AND QUESTIONS

1. Further information on rights and obligations regarding personal data protection can be obtained by the data subject on the website www.aurumpro.cz or by email info@aurumpro.cz

FINAL PROVISIONS

1. As the data subject, I declare that I am aware of my rights under Chapter III of the GDPR.
2. I declare that all data provided is accurate and true and is provided voluntarily.
3. The controller declares that it will collect personal data to the extent necessary to fulfill the purpose and process it in accordance with the purpose for which it was collected.
4. This consent is a free and informed expression of the will of the data subject, the content of which is the consent of the data subject to the processing of personal data.